Skip to main content
Version: 8.2411.x.x RR

nevisAuth direct integration

AuthStates​

The following AuthStates are used for the nevisAuth-nevisAdapt integration and should be configured:

  • DeviceCookieAuthState: Looks for a device cookie and generates one if not found.
  • NevisAdaptAuthState: Accesses the nevisAdapt service from nevisAuth.
  • CalculateFingerprintState: Used for the fingerprint calculation.
  • IdmUserNotificationState: Sends the notification emails via nevisIDM.

Login workflow​

The precondition for the nevisAdapt AuthStates to work is that the initial, mandatory authentication steps are done (such as login step).

  • If device recognition must be performed, the first AuthState to configure is DeviceCookieAuthState. This AuthState can be used regardless of whether nevisDetect is involved or not.
  • Only integrate the NevisAdaptAuthState in the standalone adaptive authentication scenario. In case nevisDetect is present, configure a plug-in for nevisAdapt instead.
nevisAdapt AuthStates

nevisAuth log configuration​

To make sure that the log from the nevisAdapt AuthStates ends up in the nevisAuth log file, set the log level to "INFO" for the AdaptAuth category. The easiest way to do that is to add the setting "AdaptAuth = INFO" to the Log Level Overrides section of the nevisAuth Log Settings pattern in nevisAdmin 4.

For more information related to the nevisAuth log settings, see the chapter Logging configuration of the nevisAuth Reference Guide.The following code block shows a sample log snippet for a Splunk or Kibana integration:

Sample log snippet

2020-11-05 19:12:22,556 tp1386883398-21 171814667471-2e6b2697-000bfa-a0400-17599d2fb27-000003bb AdaptAuth            INFO  The calculated weighted risk score is: 0.15
2020-11-05 19:12:22,556 tp1386883398-21 171814667471-2e6b2697-000bfa-a0400-17599d2fb27-000003bb AdaptAuth            INFO  User: 2222
2020-11-05 19:12:22,556 tp1386883398-21 171814667471-2e6b2697-000bfa-a0400-17599d2fb27-000003bb AdaptAuth            INFO  Message: Low risk, no further action required.
2020-11-05 19:12:22,556 tp1386883398-21 171814667471-2e6b2697-000bfa-a0400-17599d2fb27-000003bb AdaptAuth            INFO  Result 0:NevisAdaptModuleResult{moduleName='NevisAdaptGeolocation', riskScore=0, confidence=1, results=[established-ip,trusted-country,established-country,low-ip-velocity,ip-reputation-ok], status=PROCESSED, trained=false, notes='{"country":"Hungary","city":"Szeged","countryCode":"HU","latitude":46.253000,"status":"established-country,established-ip,ip-reputation-ok,low-ip-velocity,trusted-country","longitude":20.148240}', analyzerResults='[AnalyzerResult{analyzerName='SuspiciousCountryAnalyzer', result='trusted-country', riskScore=0}, AnalyzerResult{analyzerName='IpReputationAnalyzer', result='ip-reputation-ok', riskScore=0}, AnalyzerResult{analyzerName='GeoLocationAnalyzer', result='established-country', riskScore=0}, AnalyzerResult{analyzerName='IpAddressAnalyzer', result='established-ip', riskScore=0}, AnalyzerResult{analyzerName='IpVelocityAnalyzer', result='low-ip-velocity', riskScore=0}]'}
2020-11-05 19:12:22,556 tp1386883398-21 171814667471-2e6b2697-000bfa-a0400-17599d2fb27-000003bb AdaptAuth            INFO  Result 1:NevisAdaptModuleResult{moduleName='NevisAdaptDeviceRecognition', riskScore=0.1, confidence=1, results=[shared-device,established-device], status=PROCESSED, trained=false, notes='{"status":"established-device,shared-device"}', analyzerResults='[AnalyzerResult{analyzerName='DeviceCookieAnalyzer', result='established-device', riskScore=0}, AnalyzerResult{analyzerName='DeviceSharingAnalyzer', result='shared-device', riskScore=0.1}]'}